> For example just by cutting port based selectors for TCP and UDP, > cost of doing security policy checks goes down exponentially for > most software and linearly for most HW. say what? not in all implementations it doesn't.. - Bill